WSSecDKSign sigBuilder = new WSSecDKSign();
sigBuilder.setExternalKey(tempSecret, tokenId);
sigBuilder.setSignatureAlgorithm(XMLSignature.ALGO_ID_MAC_HMAC_SHA1);
sigBuilder.build(doc, crypto, secHeader);
sctBuilder.prependSCTElementToHeader(doc, secHeader);
// String out = org.apache.ws.security.util.XMLUtils
// .PrettyDocumentToString(doc);
// System.out.println(out);